Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
* bsc#1133222 * bsc#1224158 Cross-References: * CVE-2017-17507
gdb could be made to crash if it opened a specially crafted file.
A malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. References: - https://bugs.mageia.org/show_bug.cgi?id=33119
A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fi…
It was discovered that there were a number of command-line injection vulnerabilities in Composer, a popular dependency manager for PHP. The 'install', 'status'…
It was discovered that there was a buffer overflow vulnerability in libndp, a library for implementing IPv6's "Neighbor Discovery Protocol" (NDP) and is used b…
Are your tags really safe with Google Tag Manager? If you've been thinking that using GTM means that your tracking tags and pixels are safely managed, then it …
Git could be made to run programs as your login if it clones a crafted repository.
Huy Nguy¡»'n Ph¡º¡m Nh¡ºt, and Valentin T. and Lutz Wolf of CrowdStrike, discovered that roundcube, a skinnable AJAX based webmail solution for IMAP servers, …
* bsc#1226027 Cross-References: * CVE-2024-5688 * CVE-2024-5690
* bsc#1226007 Cross-References: * CVE-2023-52890
* bsc#1223252 Cross-References: * CVE-2024-30171
* bsc#1223852 Cross-References: * CVE-2023-52722
* bsc#1223979 Cross-References: * CVE-2024-34069
* bsc#1226020 Cross-References: * CVE-2024-5171
* bsc#1225551 Cross-References: * CVE-2024-4741
* bsc#1222849 Cross-References: * CVE-2024-32487
* bsc#1224122 * bsc#1226136 Cross-References: * CVE-2024-24786
* bsc#1225551 Cross-References: * CVE-2024-4741
MariaDB 10.5.25 & Galera 26.4.18 Release notes: https://mariadb.com/kb/en/mariadb-10-5-25-release-notes/
MariaDB 10.5.25 & Galera 26.4.18 Release notes: https://mariadb.com/kb/en/mariadb-10-5-25-release-notes/
When starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process can be caused to perform an arbitrary chmod of t…
iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption operations. This si…
A vulnerability was found in libndp. This flaw allows a local malicious user to cause a buffer overflow in NetworkManager, triggered by sending a malformed IPv…
